Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

autodesk design review 2018 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2019-7363
Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution.
Autodesk Design Review 2012Autodesk Design Review 2013Autodesk Design Review 2018Autodesk Design Review 2011
7.8
CVSSv3
CVE-2019-7362
DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution.
Autodesk Design Review 2011Autodesk Design Review 2013Autodesk Design Review 2012Autodesk Design Review 2018
7.8
CVSSv3
CVE-2022-27866
A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current...
Autodesk Design Review 2018Autodesk Design Review 2017Autodesk Design Review 2013Autodesk Design Review 2012Autodesk Design Review 2011
7.8
CVSSv3
CVE-2022-27865
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
Autodesk Design Review 2018Autodesk Design Review 2017Autodesk Design Review 2013Autodesk Design Review 2012Autodesk Design Review 2011
8.8
CVSSv3
CVE-2022-27864
A Double Free vulnerability allows remote malicious users to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
Autodesk Design Review 2018Autodesk Design Review 2017Autodesk Design Review 2013Autodesk Design Review 2012Autodesk Design Review 2011
7.8
CVSSv3
CVE-2022-27526
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Autodesk Design Review 2011Autodesk Design Review 2012Autodesk Design Review 2013Autodesk Design Review 2017Autodesk Design Review 2018
7.8
CVSSv3
CVE-2022-27525
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the curren...
Autodesk Design Review 2013Autodesk Design Review 2012Autodesk Design Review 2011Autodesk Design Review 2017Autodesk Design Review 2018
7.8
CVSSv3
CVE-2021-27033
A Double Free vulnerability allows remote malicious users to execute arbitrary code on PDF files within affected installations of Autodesk Design Review 2018, 2017, 2013, 2012, 2011. User interaction is required to exploit this vulnerability in that the target must visit a malici...
Autodesk Design Review 2013Autodesk Design Review 2012Autodesk Design Review 2018Autodesk Design Review 2011Autodesk Design Review 2017
7.8
CVSSv3
CVE-2021-27038
A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a maliciously crafted PDF file. A malicious actor can leverage this to execute arbitrary code.
Autodesk Design Review 2013Autodesk Design Review 2012Autodesk Design Review 2018Autodesk Design Review 2011Autodesk Design Review 2017
7.8
CVSSv3
CVE-2021-27034
A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code.
Autodesk Design Review 2011Autodesk Design Review 2012Autodesk Design Review 2013Autodesk Design Review 2017Autodesk Design Review 2018
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook